package rule

import (
	"fmt"
	conf "goclient/src/conf"
	"strings"
	"time"

	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common"
	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common/errors"
	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common/profile"
	vpc "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/vpc/v20170312"
)

func VpcRule(config conf.Device, Ip string) {
	// 实例化一个认证对象，入参需要传入腾讯云账户 SecretId 和 SecretKey，此处还需注意密钥对的保密
	// 代码泄露可能会导致 SecretId 和 SecretKey 泄露，并威胁账号下所有资源的安全性。以下代码示例仅供参考，建议采用更安全的方式来使用密钥，请参见：https://cloud.tencent.com/document/product/1278/85305
	// 密钥可前往官网控制台 https://console.cloud.tencent.com/cam/capi 进行获取
	credential := common.NewCredential(
		config.Secretid,
		config.Secretkey,
	)
	// 实例化一个client选项，可选的，没有特殊需求可以跳过
	cpf := profile.NewClientProfile()
	cpf.HttpProfile.Endpoint = "vpc.tencentcloudapi.com"
	// 实例化要请求产品的client对象,clientProfile是可选的
	client, _ := vpc.NewClient(credential, "ap-shanghai", cpf)

	// 实例化一个请求对象,每个接口都会对应一个request对象
	request := vpc.NewDescribeSecurityGroupPoliciesRequest()

	request.SecurityGroupId = common.StringPtr(config.Instanceid)

	// 返回的resp是一个DescribeSecurityGroupPoliciesResponse的实例，与请求对象对应
	response, err := client.DescribeSecurityGroupPolicies(request)
	if _, ok := err.(*errors.TencentCloudSDKError); ok {
		fmt.Printf("An API error has returned: %s", err)
		return
	}
	if err != nil {
		panic(err)
	}

	flag := false
	for _, i := range response.Response.SecurityGroupPolicySet.Ingress {
		if strings.Index(*i.PolicyDescription, config.Name) != -1 {
			fmt.Println("添加ip %s 到安全组 %s", *i.Port, *i.PolicyDescription)
			*i.CidrBlock = Ip
			flag = true
		}
	}

	if flag {
		// 输出json格式的字符串回包
		fmt.Printf("添加ip 开始 %s", Ip)
		now := time.Now()

		for _, i := range response.Response.SecurityGroupPolicySet.Ingress {
			// 实例化一个请求对象,每个接口都会对应一个request对象
			addRequest := vpc.NewReplaceSecurityGroupPolicyRequest()
			addRequest.SecurityGroupId = common.StringPtr(config.Instanceid)
			addRequest.SecurityGroupPolicySet = &vpc.SecurityGroupPolicySet{
				Ingress: []*vpc.SecurityGroupPolicy{ // 出站
					&vpc.SecurityGroupPolicy{
						PolicyIndex:       common.Int64Ptr(*i.PolicyIndex),
						Protocol:          common.StringPtr("TCP"),
						Port:              common.StringPtr(*i.Port),
						CidrBlock:         common.StringPtr(Ip),
						Action:            common.StringPtr(*i.Action),
						PolicyDescription: common.StringPtr(config.Name + "ip:" + now.Format("2006-01-02 15:03:04")),
					},
				},
			}
			addResponse, addErr := client.ReplaceSecurityGroupPolicy(addRequest)
			if _, ok := addErr.(*errors.TencentCloudSDKError); ok {
				fmt.Printf("An API error has returned: %s", addErr)
				return
			}
			if err != nil {
				panic(err)
			}
			// 输出json格式的字符串回包
			fmt.Printf("添加成功： %s", addResponse.ToJsonString())
		}
	}
}
